instagram-login-authentication.duckdns.org

Instagram

http://instagram-login-authentication.duckdns.org Access site

Screenshot

Investigate

Domain instagram-login-authentication.duckdns.org0 CT hosts on apex

urlscan

page.domain

VirusTotal

Whois

IP 3.219.240.71

urlscan

page.ip

VirusTotal

ipinfo

Greynoise

URL http://instagram-login-authentication.duckdns.org

urlscan

Wayback

archive.today

Cert -

crt.sh

Censys

Google CT

Phishunt analysis Beta

37 medium suspicion suspiciousheuristic risk score · not a probability

Why?

+6.1 Google Safe Browsing
+5.3 Keyword match
+4.5 Brand in title
+3.7 Brand in domain label
+3.0 Site cluster
+3.0 OpenPhish
+3.0 PhishTank
+2.0 Young domain
+1.5 ASN reputation
+1.1 No CSP header
+1.1 No HSTS header
+0.8 Brand + login token
+0.7 Bulletproof DNS
+0.6 Long domain
+0.6 Suspicious TLD
+0.2 Hyphens
+0.1 Deep subdomain

19 signals fired · detector v3.0.0

AI analysis AIBeta

Credential harvesting

Site impersonates Instagram via a DuckDNS subdomain that explicitly names login and authentication, using combosquatting of the brand. Google Safe Browsing flags it as social engineering and OpenPhish confirms it as malicious, consistent with Instagram account credential phishing.

Brand + login tokenGoogle Safe BrowsingBrand in domain label

AI-generated from stored detector signals - the AI never visited the site. · 2026-08-23 · confidence 76%

Domain & Network

Whois

Registrar Gandi SAS

Network

IP 3.219.240.71

Country